Re: CVEs and Oracle products

From: Job Miller <jobmiller_at_yahoo.com>
Date: Fri, 6 Jun 2014 10:25:38 -0700 (PDT)
Message-ID: <1402075538.62750.YahooMailNeo_at_web140402.mail.bf1.yahoo.com>


you looking for something like this?

Mapping of CAN and CVE numbers to Advisory and Alert

 
 Mapping of CAN and CVE numbers to Advisory and Alert
Mapping of CAN and CVE numbers to Advisory and Alert  
View on www.oracle.com Preview by Yahoo  

The CPU patches the mapping links to have tables that map the product to the CVE also.


http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixDB


________________________________
 From: Patrice sur GMail <patrice.boivin_at_gmail.com>
To: ORACLE-L <oracle-l_at_freelists.org> 
Sent: Friday, June 6, 2014 12:46 PM
Subject: Re: CVEs and Oracle products
 


I also know about mitre.org... e.g. http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=oracle and NIST... e.g. for the OpenSSL CVE: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224

But it refers to openSSL, not to the products running OpenSSL...  can't quickly tell if any Oracle products are affected.
--
http://www.freelists.org/webpage/oracle-l
Received on Fri Jun 06 2014 - 19:25:38 CEST

Original text of this message